94 matches found
CVE-2025-57446
The CVE-2025-57446 entry concerns the O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment. The underlying issue is a vulnerability in the Subscription Manager API component that allows remote attackers to cause a denial of service via a crafted request. Affected software is descri...
CVE-2024-34048
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...
CVE-2024-34036
An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...
CVE-2024-34035
An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp...
CVE-2024-34036
An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...
CVE-2024-34034
An issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of-service DoS attack, triggered by an assertion error. An attacker must send a high number of E42 Subscription Requests to the Near-RT RIC component...
CVE-2024-34036
An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...
CVE-2024-34035
An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp...
CVE-2024-34036
The CVE concerns the O-RAN Near Realtime RIC I-Release. The issue arises when an attacker inundates the system with a high volume of xApp subscription requests to disrupt the initial gNB–Near RT-RIC connection. Documented impact is disruption of the initial connection; no explicit exploit details...
O-RAN RIC 安全漏洞
O-RAN RIC is a RIC application from O-RAN. A security vulnerability exists in O-RAN RIC that stems from an attacker sending a large number of subscription requests via xApp to disrupt the initial connection between the gNB and Near RT-RIC...
CVE-2024-34034
Affected software: FlexRIC 2.0.0. Vulnerability: An assertion error triggers a crash (DoS) when processing a large number of E42 Subscription Requests to the Near-RT RIC component. Impact (as stated): Denial of service against FlexRIC via repeated Subscription Requests; availability impact is hig...
CVE-2024-34036
An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...
PT-2025-7887
Name of the Vulnerable Software and Affected Versions FlexRIC version 2.0.0 Description An issue was discovered that causes FlexRIC to crash during a denial-of-service DoS attack. This is triggered by an assertion error when an attacker sends a high number of E42 Subscription Requests to the...
CVE-2024-34035
An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp...
CVE-2024-34473
An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...
CVE-2024-34473
An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...
CVE-2024-34473
An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...
CVE-2024-34473
CVE-2024-34473 affects the appmgr component of the O-RAN Near-RT RIC I-Release. The root cause is that an attacker could register an unintended RMR message type during xApp registration, which can disrupt other service components. The available documents describe the vulnerability and impact but ...
Denial Of Service (DoS)
github.com/onosproject/onos-ric-sdk-go is vulnerable to Denial of Service DoS.The vulnerability is due to indefinite repetition of error processing within the Subscribe function when handling the subscribed indication stream. This issue may lead to resource exhaustion...
